home

www.tourpackageshare.com

Communigal Communication Ltd

Domain Information

The domain www.tourpackageshare.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, January 8, 2016

Expires date:
Sunday, January 8, 2017

Updated date:
Friday, January 8, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourpackageshare.com

Whois:
1 tourpackageshare.com record

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), PUP.NewMedia.Installer.Installer (M), PUP.InstallCore.InstallerInternetprogram.Installer.Meta (M), PUP.NewMedia.NMH.Bundler (M)
93.33%

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application, Win32/InstallCore.AFF.gen potentially unwanted application
13.33%

VIPRE Antivirus
Threat.4150696
6.67%

The domain www.tourpackageshare.com has been seen to resolve to the following 9 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 27, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 27, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 27, 2016

File downloads found at URLs served by www.tourpackageshare.com.

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=E7XVnYLYWzaOfjXSwbP47q5UpIiWcJiELGNsMcqXIig=&c=Ub/qvfvdNe17ZJQc6jkNEd/1CB3OCVdxS qg1lU4p989/m26DrLfi0MBcgmgcPOi0v1MG6mDjViIQ2F05xpkqGLgnOofGpQkrzy4vJjqshHv3kBRTWGMUZ6lOt/WbZlfbeLBal9V53CfVgQ5DhcJKg==&downloadAs=Total_Video_Converte.exe&fallback_url=http://.../get.php?file=de05a0e8&m  (ec73bbd4a73a1de4e1970cd8ded29bb7)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=4t2i/G2WlJ7MZZIaBRnTHhI9bZSvFyfMaSs3slwh0No=&c=w3XMzu9yYqkisJQPjHMYrYfp8W9/xeu0UMDl8OEthzUaAcHp2Nx6baryT5PIiNCoQCrLY9R2pAR6wRftUNO3fE/lo 0lIgKTbVWctQJgc1 Yx5Xh AdL479smIxM5FnA7VpTq1w4Hb8HzJhPnaz3/w==&downloadAs=Jenifer_lopez_feat_P.exe&fallback_url=http://.../setup1.19.exe  (c.exe)

2 / 68      (PUP)
http://www.tourpackageshare.com/c?x=3Ddi/in31Rfrjuj3ovAC7JSDOWwk YRbhseuNw0niKM=&c=um3e7O wLkwBtmnzca1YSjwp3Hqju6GVcXcrr4VlLC2oMr5SePnQiIqVgQtSu9uTxMGKrlWL9tmjOrV35dHF14nR3TX3AmpqnBpf8LHXGq1HKQ5HBjVu4uccBWHB3B8SbLjdC2KWR154db5cs6ggEA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=ncZeNETi9V2/BqPIZK0zooq7chZUual46jjd lLG9Bo=&c=AGOIeaR3S9 i adaugLFT4u6dFsCvIj2zmZwNBHF3spacZeB8vke3MDbbU2bdPaFG xcdUwctxv4Y8Crtbz44ypLKPZjt/5hbglFBda5I4ucKtPwVyBVOzWUyt OiATIBbFnOZg0IreIZlz9DqL0Nw==&downloadAs=_-_Ploychompoo.exe&fallback_url=http://.../setup1.19.exe  (c.exe)

2 / 68      (PUP)
http://www.tourpackageshare.com/c?x=Zbu2dF 9LIRArm7eOrwHAAyLyORo1wDgygiGNQRUDGI=&c=HAUXIgnMr6P/NhSwJq N8G37POjdAWvWbTqEe8d1lYSNwyNoCu9NMTxfoILoziy/q6E8bCW5xyiHXk kEqdsD87jm055QdLfRuWgpFnyq0fhpT4qXbhDFkzSvDZfcpHAc/jftgHlbZaWBsRVIBdi3g==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

2 / 68      (PUP)
http://www.tourpackageshare.com/c?x=f7JdgbkjFVeC1qA4OLZGSe2IjklurjtLiq30VpwP6uQ=&c=F41vCffeED1rUNqY44IrxV5RGQVFp/kKbc3o2bL46K1tijPVn1PZ0s1fP/CCKvoHKV8cmbHxr6VzsSg29N82lybjQfsZ/cDFneiOuITjjbnOZ6hXvhDSN69uvQmpiAJNGPKHJ6umNcrxw3lbkGTB6g==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

2 / 68      (inconclusive)
http://www.tourpackageshare.com/c?x=WJWVU4ZAJ3Ee3WfSmGyyi oUiAQYw4lhg4Kw WaUgmw=&c=B3osA7JjcjOPKo18vCboKfgP9kwPd0g3WgmWEqjOjLeUNU4fuuRa BvuXzbnJGR4N9I tM4JZQP4bwrB6Ak/gb/WGjs/E2m8hlG 8eQwXrxei9pjqhiAtw3/lQ1U06p51BCHh8usjqqfmfqMMVah A==&downloadAs=zfactura_keygen.exe&fallback_url=http://.../setup1.19.exe  (c.exe)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=vTHJNtNCrxOJiVxHBW7MtIkKLNzI7Z8IfmpMrE3gmj4=&c=ZgXXlasD3LDtH293VP7vM RA8X1we31b5rCVx0Z8Vvu/7vDYsTk50MtNPOs3Uh/FXj nhDdXsKcE/GmTYex7ghoTJ6kxIpx1WUNeWvwYVwOoo 873aG1 xSR7Tb81sfxbm9PwRQQXW3w0BNwM/Mtzw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x= /G1x9U6yxgz9pOP6M e0s7H0d9GiMQu69/47yCM39c=&c=DKjX9eRLu8eg7D2ETZOAi3AEOqDom 3zyeWW8HvtFvvzAg3nMHY8Y6sH9tA8qAq9kRtNI2vQ2tk54H0bjswg4464XLnktaKuOSMj3sdCB3D6Cij3MI6liJWMUwkTaNqbyN1C32VWCf3B9kyeQBiiQQ==&downloadAs=wifislax-4-10_By_POK.exe&fallback_url=http://.../setup1.19.exe  (f6519a2e06b5c46ff45fe4f0d74cf415)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=QYsoQKG2wImFFbM7ku/HN8lzQfdw7bQw8ruUTMvCmig=&c=Q8zv9CtBo8llxvogZ9DH9y2vtC90SdVFgkupAo4drGP9BWCuQnOl7rkvNyIb3aHO3lRjKTgL0E9TRCNApCK0OAAwsSSKyB4KshDwupweux/pFBcIVn6k5ctkF7PJebveO2pTSBmh drisUTzR4eOTg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=/rQbO8SlrHSmSgT 95QgJ4rcAinA8TrG fAl3DKDVzc=&c=xHaAF63KCosIn7VOv226mpg9PNVVvxu/RTFbhYK4miI/Skf2rP5eTGw3qpb0WmxyboesCmqdB74N6o7SSWzWA4u7KnUJjXn71aBcvKQ6FndizT1omtFdEW3gEwqsxrG44V1PmdDZzJKUv/mVUrs9iA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=MkSD7AMtkpVC6kiNV/l56vg3qtyKO1GFTb//ftiDt E=&c=L2UQcPhO3xOmjVIu38T4MR9Fr08YnFWU6hs8 zCVvpfVOp0JGvSiw7lEwWE1S4XFjg3nbMM4ZiuEggkB7cNP8wveiA9sS39i3VTM6Pyyl 90olQ9RgSBim63J9UkkjbSVzlAbXeZWX5ViI2H1R7oBA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=TqaGeNe5aGnKC e8RfNKD96mmuT1zQKOw0v40z1GXo0=&c=A8O7trfDvrDuzw0FzRvRkuoks5qZ2RkOoZDXjcLoGvDE DTZCEc7ZCVc6TjBfcJ4ACr4NrqwQHPnlUj/0j7Txtz6hfRyJJPlPhO4sPSeB0GcfQbpsbQC2lXeT8hbFP qiHNWpdrrcdKqENiVhaMSuw==&downloadAs=Dilwale2015.exe&fallback_url=http://.../setup1.19.exe  (setup.exe)

2 / 68      (PUP)
http://www.tourpackageshare.com/c?x=Ow4fTSviT0nUE7ekI1JpolKGgs30DCJ5nKB29HnhcOs=&c=jce5G jGPvUG 1lCxbOf5Uob46vglhsn4LmpAa3gUaVXgFSel4aEJUtXXHYUpkxRvYUodXWB3B9rpCYrk/AjAHxBbnZpah0K1fXFdO0UfTa5lknH Kqn55vej16hjmBbdKe2aYZkQJx8IRX4NPMEWg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.tourpackageshare.com/c?x=NhRaS9LHyjLALSWeV9y 83ezIG0IrTBFF1e pT1R0zg=&c=GyEfT9AJq ODDhu3uRbr Cp2l/MBpMtta1SDo8Un2Oh6TT3D3Ur/Zh3mjXV4xJf1VP4yzOMErvodiQ1HM/SOrSmJCYz2Cn2MxFEmMYe4lkrXjL6os1jyLq2mQK/ wcq59N6LrXWIuestOj1OEDTnEQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=XQh3HgznkWgmreXzQEQ8905N9ghd6WQnzddO4olXmu0=&c=Ntj3noIvzLPCCfkXyYByEvKu7sPD4lR7wgMXqyVInKCzz3dPs3vyYKM2yZ6OMCNuy/vf562Ue3R61AYVnfBpDgAZsG9 7369brxXrn6KqMDkgn5oryh1eR8BUveDxETrznWB84Y5FBWwRLtJWSKvOg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (259d1dae07c6c7c1c23f00b9beb56e21)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=OnOvAcAjPs fK3bTlIxFuhc2l5FuyLmIEyVGzozsVek=&c=rVjr4B6Y0P0LZdpeejDNdKDYOB33t3jefmoAGWzHSBn4hqrGZJN0mudrkyVqBGxrv03d7uyWVI/4fqsDHqVxx0RPiN7tQ/npXyK4M1/ye7ogqE6Mg5RChImJkz79Vk y1U0W9dqyVU7jW0vexGPXbA==&downloadAs=ygopro-10337-v2-perc.exe&fallback_url=http://.../get.php?file=f1c9b52a&m  (227f7ed376de9337456763ec0d94bfdc)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=LgfSjQryazDGha0CUyREajNR7GrKGi7QbQq8jZ2ZeNE=&c=F9GQoHz0GIZUpzQYm2o5ReM2l7wronOk/8iV/GHP8jSg7uBeMd2sv80BKQG//x3ktQswT19F2OHkFaw1Z/dMHSfAE/KGH1B8 HHSVTCJNhY/KuqSqTnHoCTo4IqbLs6a0mG/xSogQFYJ0tcC 3RcpA==&downloadAs=rome_total_war_2_key.exe&fallback_url=http://.../setup1.19.exe  (5e267195d3261f923916eab081ce0fbe)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=9aHMhD0FvR1Cfl25pNFGHo804yXtyABtqfkVROhCLGo=&c=OsQ2Xw0Z6nPl/bCS5zq/Mg/qcfgtiXeyA6pz1fiVgqbE59/914Xp jN1JoLfUjzy2QIyv2xpxYk0oQW6VLNAH6h0ktT27qlbGQsHYlZtpmeWJKltWvXS4dZmYJJb0siglshYMZsCfa dMUiavmIUtQ==&downloadAs=SetUp.exe&fallback_url=http://.../setup1.19.exe  (416740c02e5faa54a60feb1bd3fe23e3)

1 / 68      (Adware)
http://www.tourpackageshare.com/c?x=h/Dl8KqE68XJyBNP3jcarTAVSO9sI2IGy7x3vZvEcX8=&c=Un6kEO VqhKMOXVmAbbRDVl aGjI6lyh7JapS1A3Htpcm5XUdmTn9FZ/brn50XrBKtvQTYonrufNNcQpR1Vl1neLAMst9nEhcDIS8ITIV3zdqh/LBvfd2ugZRa04B 26KIiZs9IJkdzSPp8Z07mk7g==&downloadAs=IGG-ARK_Survival_Evo.exe&fallback_url=http://.../setup1.19.ex  (d45fe89979ddd6d277bb626869ecf96c)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.